Tenable Network Monitor Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in Tenable Network Monitor versions prior to 6.5.1 on Windows. The issue allows non-administrative users to stage files in a local directory, which can then be executed as arbitrary code with SYSTEM privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized access to SYSTEM privileges, allowing a user to execute code with elevated rights.

Remediation

Users can upgrade to Tenable Network Monitor version 6.5.1 to address this vulnerability. The installation files are available from the Tenable Downloads Portal.